Google has recently confirmed a serious new zero-day threat for Android devices, specifically targeting a vulnerability in the Android kernel. This vulnerability, identified as CVE-2024-36971, could potentially lead to remote code execution with System execution privileges required. The fix for this issue is included in Android's August security update.
While Google is expected to promptly patch its own Pixel devices, Samsung Galaxy users may have to wait for the update to be rolled out to their devices. Samsung released details of its August security firmware update around the same time as Google's warning, but it does not include the fix for the newly identified threat. However, the update does address critical fixes, including the resolution for a previous zero-day vulnerability from June.
